QNX8 QEMU x86_64 Integration tests

.bazelrc

@@ -1,5 +1,5 @@
 # *******************************************************************************
-# Copyright (c) 2025 Contributors to the Eclipse Foundation
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -16,7 +16,6 @@ build --java_language_version=17
 build --tool_java_language_version=17
 build --java_runtime_version=remotejdk_17
 build --tool_java_runtime_version=remotejdk_17
-
 # ============================================================================
 # Multi-Architecture Build Configuration
 # ============================================================================
@@ -44,17 +43,26 @@ common:x86_64-linux --repo_env=TARGET_ARCH=x86_64
 common:aarch64-linux --config=_toolchain_common
 common:aarch64-linux --platforms=@score_bazel_platforms//:aarch64-linux-gcc_12.2.0-posix
 common:aarch64-linux --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_linux_gnu
+common:aarch64-linux --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 common:aarch64-linux --repo_env=TARGET_ARCH=aarch64
 
 common:x86_64-qnx --config=_toolchain_common
 common:x86_64-qnx --platforms=@score_bazel_platforms//:x86_64-qnx-sdp_8.0.0-posix
 common:x86_64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_pc_nto_qnx800
+common:x86_64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 common:x86_64-qnx --repo_env=TARGET_ARCH=x86_64
+common:x86_64-qnx --sandbox_writable_path=/var
+common:x86_64-qnx --action_env=QNX_TARGET_ARCH=x86_64
+common:x86_64-qnx --spawn_strategy=local   # Disable sandbox: bazel tests command need to be able to access the QEMU network
 
 common:aarch64-qnx --config=_toolchain_common
 common:aarch64-qnx --platforms=@score_bazel_platforms//:aarch64-qnx-sdp_8.0.0-posix
 common:aarch64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_nto_qnx800
+common:aarch64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 common:aarch64-qnx --repo_env=TARGET_ARCH=aarch64
+common:aarch64-qnx --sandbox_writable_path=/var/tmp
+common:aarch64-qnx --action_env=QNX_TARGET_ARCH=aarch64le
+common:aarch64-qnx --spawn_strategy=local  # Disable sandbox: bazel tests command need to be able to access the QEMU network
 
 common --credential_helper=*.qnx.com=%workspace%/.github/tools/qnx_credential_helper.py
 

.devcontainer/devcontainer.json

@@ -4,7 +4,9 @@
         "dockerfile": "Dockerfile"
     },
     "runArgs": [
-        "--privileged"
+        "--privileged",
+        "--add-host=host.docker.internal:host-gateway",
+        "--device=/dev/kvm"
     ],
     "mounts": [
         {
@@ -31,5 +33,7 @@
                 "streetsidesoftware.code-spell-checker"
             ]
         }
-    }
+    },
+    "postCreateCommand": "sudo apt-get update && sudo apt-get install -y software-properties-common && sudo add-apt-repository -y universe && sudo apt-get update && sudo apt-get install -y qemu-system-x86 iputils-ping tcpdump iptables",
+    "postStartCommand": "sudo chmod 666 /dev/kvm"
 }

.github/workflows/build_and_test_qnx.yml

@@ -44,3 +44,57 @@ jobs:
       score-qnx-license: ${{ secrets.SCORE_QNX_LICENSE }}
       score-qnx-user: ${{ secrets.SCORE_QNX_USER }}
       score-qnx-password: ${{ secrets.SCORE_QNX_PASSWORD }}
+
+  # QEMU integration tests - runs built QNX binaries in QEMU
+  # Bridge networking required for x86_64-qnx SOME/IP communication between QEMU instances
+  qemu_integration_tests:
+    strategy:
+      fail-fast: false
+      matrix:
+        bazel-config: ["x86_64-qnx", "aarch64-qnx"]
+    runs-on: ubuntu-24.04
+    needs: build_and_test_qnx
+    permissions:
+      contents: read
+      pull-requests: read
+    env:
+      SCORE_QNX_USER: ${{ secrets.SCORE_QNX_USER }}
+      SCORE_QNX_PASSWORD: ${{ secrets.SCORE_QNX_PASSWORD }}
+      SCORE_QNX_LICENSE: ${{ secrets.SCORE_QNX_LICENSE }}
+    steps:
+      - uses: eclipse-score/more-disk-space@v1
+      - name: Checkout repository
+        uses: actions/checkout@v4.2.2
+      - name: Create Bazel output base directory
+        run: |
+          sudo mkdir -p /mnt/.bazel
+          sudo chown -R $USER:$USER /mnt/.bazel
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.18.0
+        with:
+          output-base: /mnt/.bazel
+          bazelisk-cache: true
+          disk-cache: ${{ github.workflow }}-${{ matrix.bazel-config }}-tests
+          repository-cache: true
+          external-cache: true
+      - name: Allow linux-sandbox
+        uses: ./.github/actions/unblock_user_namespace_for_linux_sandbox
+      - name: Install QEMU bridge prerequisites
+        if: matrix.bazel-config == 'x86_64-qnx'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y bridge-utils qemu-system-x86 iproute2 tcpdump libcap2-bin
+      - name: Enable KVM access
+        if: matrix.bazel-config == 'x86_64-qnx'
+        run: |
+          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm.rules
+          sudo udevadm control --reload-rules
+          sudo udevadm trigger --name-match=kvm
+          ls -la /dev/kvm
+      - name: Setup QEMU bridge network
+        if: matrix.bazel-config == 'x86_64-qnx'
+        run: |
+          sudo ./deployment/qemu/setup_bridge.sh setup
+      - name: Bazel test
+        run: |
+          bazel test --config ${{ matrix.bazel-config }} --test_output=all //tests/...

MODULE.bazel

@@ -1,5 +1,5 @@
 # *******************************************************************************
-# Copyright (c) 2025 Contributors to the Eclipse Foundation
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -62,13 +62,26 @@ use_repo(pip, "someip_pip")
 bazel_dep(name = "googletest", version = "1.17.0", dev_dependency = True)
 bazel_dep(name = "google_benchmark", version = "1.9.4", dev_dependency = True)
 
+# Opened problem report at: https://github.com/eclipse-score/itf/issues/60
+bazel_dep(name = "score_itf", version = "0.1.0")
+git_override(
+    module_name = "score_itf",
+    commit = "e994cb6",  # Main branch with simplified QEMU plugin
+    patch_strip = 1,
+    patches = ["//third_party:score_itf_oci_conflict.patch"],
+    remote = "https://github.com/eclipse-score/itf.git",
+)
+
 # ============================================================================
 # Build System Rules
 # ============================================================================
 bazel_dep(name = "rules_cc", version = "0.2.14")
 bazel_dep(name = "rules_rust", version = "0.63.0")
 bazel_dep(name = "rules_pkg", version = "1.1.0")
 
+# Required by score_toolchains_qnx qnx_ifs rule for tar extraction
+bazel_dep(name = "tar.bzl", version = "0.7.0")
+
 # Platforms: Standard constraint values and platform definitions
 # Required for select() expressions that use @platforms//cpu:* and @platforms//os:*
 bazel_dep(name = "platforms", version = "1.0.0")
@@ -140,8 +153,30 @@ register_toolchains(
     "@score_gcc_aarch64_toolchain//:all",
     "@score_qcc_x86_64_toolchain//:all",
     "@score_qcc_aarch64_toolchain//:all",
+    "@toolchains_qnx_ifs//:all",
+    dev_dependency = True,
+)
+
+# ============================================================================
+# QNX IFS Image Toolchain (for building QEMU filesystem images via mkifs)
+# ============================================================================
+bazel_dep(name = "score_toolchains_qnx", version = "0.0.7", dev_dependency = True)
+
+toolchains_qnx = use_extension(
+    "@score_toolchains_qnx//:extensions.bzl",
+    "toolchains_qnx",
     dev_dependency = True,
 )
+toolchains_qnx.sdp(
+    sha256 = "f2e0cb21c6baddbcb65f6a70610ce498e7685de8ea2e0f1648f01b327f6bac63",
+    strip_prefix = "installation",
+    url = "https://www.qnx.com/download/download/79858/installation.tgz",
+)
+use_repo(toolchains_qnx, "toolchains_qnx_ifs")
+# register_toolchains(
+#     "@toolchains_qnx_ifs//:ifs_x86_64",
+#     dev_dependency = True,
+# )
 
 # ============================================================================
 # LLVM C/C++ Toolchain Configuration
@@ -172,7 +207,7 @@ register_toolchains(
 # ============================================================================
 # Tooling & Development
 # ============================================================================
-bazel_dep(name = "score_tooling", version = "1.0.4", dev_dependency = True)
+bazel_dep(name = "score_tooling", version = "1.1.2", dev_dependency = True)
 bazel_dep(name = "aspect_rules_lint", version = "1.10.2", dev_dependency = True)
 bazel_dep(name = "buildifier_prebuilt", version = "8.2.0.2", dev_dependency = True)
 
@@ -186,6 +221,15 @@ bazel_dep(name = "score_docs_as_code", version = "2.3.0", dev_dependency = True)
 # ============================================================================
 bazel_dep(name = "score_communication", version = "0.1.2")
 
+# On aarch64 (ARM), C's char is unsigned (u8)
+# Fixed upstream on main by commit b9efce9702d108fd63be806738db50c14d354302
+# Opened problem report at: https://github.com/eclipse-score/communication/issues/172
+single_version_override(
+    module_name = "score_communication",
+    patch_strip = 1,
+    patches = ["//:third_party/score_communication-cchar.patch"],
+)
+
 # ============================================================================
 # Base Libraries
 # ============================================================================

README.md

@@ -1,4 +1,3 @@
-
 # SOME/IP Gateway
 
 The gateway is divided into a gateway daemon (gatewayd) which contains the network-independent logic (payload serialization, etc.) and the SOME/IP daemon (someipd) which binds to the concrete SOME/IP stack.
@@ -41,42 +40,37 @@ bazel run //examples/car_window_sim:car_window_controller
 If you type `open` or `close` the command will be sent via network.
 
 
-### Dockerized integration test POC
+### QEMU x86_64 - based integration test and unit tests
+
+For integration tests where the communication between two QEMU instances is required, a custom implementation is used to start and manage the QEMU instances within the test logic. This is because ITF does not support starting multiple QEMU instances in parallel yet.
 
-For integration tests, a docker based approach was taken.
-As a proof of concept `docker compose` can be used to build, setup and run the containers.
-In the future a pytest based setup can be implemented to orchestrate the containers.
+For the QEMU QNX x864 image to run on host please run the script deployment/qemu/setup_bridge.sh with sudo privileges to setup the required network bridge and tap interfaces.
+It is stronly recommended to run all tests with `--nocache_test_results` which is the best way on development cycles to ensure you are always running the latest version of the tests and not accidentally running cached results.
 
-Build the docker containers:
+Tu run all tests (will take around 2 minutes)
 
 ```sh
-docker compose --project-directory tests/integration/docker_setup/ build
+bazel test  //tests/...  --test_output=all --nocache_test_results --config=x86_64-qnx
 ```
 
-Start up the containers:
+For Integration SOMEIP Service Discovery tests:
 
 ```sh
-docker compose --project-directory tests/integration/docker_setup/ up
+bazel test //tests/integration/... --test_output=all --config=x86_64-qnx
 ```
 
-Those containers are pre-configured (IP adresses, multicast route, ...).
-The someipd-1 container already starts up the `gatewayd` and the `someipd`.
-
-In Wireshark the network traffic can be seen by capturing on `any` with `ip.addr== 192.168.87.2 || ip.addr ==192.168.87.3`.
-
-On the client side, start up the `sample_client` in another shell:
+Run a specific integration test `test_negative_only_qemu1_with_services` for SOMEIP Service Discovery test suite:
 
 ```sh
-docker exec -it --env VSOMEIP_CONFIGURATION=/home/source/tests/integration/sample_client/vsomeip.json docker_setup-client-1 /home/source/bazel-bin/tests/integration/sample_client/sample_client
+bazel test //tests/integration:test_someip_sd --test_output=all --config=x86_64-qnx --test_arg='-k' --test_arg='test_negative_only_qemu1_with_services'
 ```
 
-Finally start the benchmark on the someipd-1 container in a third shell:
+To run the QNX tests using dev containers please execute the shell command:
 
 ```sh
-docker exec -it docker_setup-someipd-1 /home/source/bazel-bin/tests/performance_benchmarks/ipc_benchmarks
+sudo deployment/qemu/setup_bridge.sh
 ```
 
-
 ## 📝 Configuration
 
 ### Gatewayd Config Schema Validation